[tor-commits] [tor-browser-spec/master] Update Fenix84 net audit

sysrqb at torproject.org sysrqb at torproject.org
Tue Dec 8 23:07:15 UTC 2020


commit d68aa868ef206168b44c639ac83ddae6274070fc
Author: Matthew Finkel <sysrqb at torproject.org>
Date:   Tue Dec 8 23:06:41 2020 +0000

    Update Fenix84 net audit
---
 audits/FF84_NETWORK_AUDIT | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/audits/FF84_NETWORK_AUDIT b/audits/FF84_NETWORK_AUDIT
index 039dd96..a4c6ee0 100644
--- a/audits/FF84_NETWORK_AUDIT
+++ b/audits/FF84_NETWORK_AUDIT
@@ -1,4 +1,4 @@
-`git diff 1cb2c4893850a5b0a246f821a6390c07064c1227 9e429e392ec8446ff0f078f991d6332a307bc98f`
+`git diff 1cb2c4893850a5b0a246f821a6390c07064c1227 11898884c81cd84cfaec46dffe1dbf42517e8301`
 and then go over all the changes containing the
 below mentioned potentially dangerous calls and features. Grep the diff for
 the following strings and examine surrounding usage.
@@ -33,6 +33,13 @@ TRR (DNS Trusted Recursive Resolver)
 # Bug 1673590:
 #  - Still protected by https://bugzil.la/1636411
 
+# Bug 1674088:
+#   - Increase TRR max failures and add new pref
+#     |network.trr.retry-timeout-ms|
+
+# Bug 1677806
+#   - Set network.dns.dns_query_single_label to false
+
 
 Direct Paths to DNS resolution:
 nsDNSService::Resolve
@@ -139,14 +146,14 @@ End: 6a234c2b1e1972f11e585551d4cf2e40e84bf16f # v67.0.0
 ============ Android Components Portion =============
 
 Start: 0a2993d44aae3d877bb97cee925096f83af01b3a # v63.0.8
-End: 614386935ec94cac531eb8cb061409e9a8410d09 # v67.0.3
+End:   89973898761d54c7512bb74ea2c3489fca07bf8e # v67.0.10
 
 # FF84: Zero new usage found of known proxy-bypass APIs (using `java_audit.sh`)
 
 ============ Fenix Portion =============
 
 Start: 5441935698f4d9e3606f3d6baf892f6e0106a2f6 # v83.1.0-rc.1
-End: 670e61b2b97d4f8066497e79178729c5802fe428 # v84.0.0-beta.2
+End: 8b4b9bde5f2dab9fec1631fbfc70d4e2c3b2d24e # v84.1.0-rc.1
 
 # FF84: Zero new usage found of known proxy-bypass APIs (using `java_audit.sh`)
 



More information about the tor-commits mailing list